CVE-2022-30759 – Nokia OneNDS 20.9 Insecure Permissions / Privilege Escalation

https://notcve.org/view.php?id=CVE-2022-30759

In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands. Nokia OneNDS 20.9 has loose sudo permissions that can allow users to escalate privileges. • https://packetstormsecurity.com/files/171971/Nokia-OneNDS-20.9-Insecure-Permissions-Privilege-Escalation.html https://www.nokia.com/networks/products/one-nds • CWE-276: Incorrect Default Permissions •